PyPI
blacklanternsecurity/bbot
The recursive internet scanner for hackers. 🧡
AGPL-3.0Aug 11, 2026 · metrics 2.10.0
All tags
Catalogue tag
#recon
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
19 records
PyPI
blisspixel/recon
Public-metadata domain intelligence from DNS, certificate transparency, and unauthenticated identity discovery. Local Python CLI, versioned JSON, and stdio MCP server. No credentials or active scanning.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
Go · npm
xalgord/xalgorix
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
MITJul 17, 2026 · metrics 2.10.0
Hex
zhongwencool/observer_cli
Visualize Erlang/Elixir Nodes On The Command Line
MITJul 17, 2026 · metrics 2.10.0
Go
Chocapikk/wpprobe
A fast WordPress plugin enumeration tool
MITAug 29, 2026 · metrics 2.10.0
Go
chainreactors/gogo
面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams
GPL-3.0Jul 17, 2026 · metrics 2.10.0
PyPI
adbar/courlan
Clean, filter and sample URLs to optimize data collection – Python & command-line – Deduplication, spam, content and language filters
Apache-2.0Jul 21, 2026 · metrics 2.10.0
PyPI
arxhr007/Aliens_eye
Hunt down 840+ social media accounts using AI
MITAug 4, 2026 · metrics 2.10.0
Go
cc1a2b/JShunter
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.
MITSep 6, 2026 · metrics 2.10.0
PyPI
olizimmermann/s3dns
Find S3 AWS/GCP/Azure buckets while surfing. S3DNS acts as DNS server, follows CNAMEs and matches any bucket pattern
MITJul 17, 2026 · metrics 2.10.0
RubyGems
urbanadventurer/WhatWeb
Next generation web scanner
GPL-2.0Aug 28, 2026 · metrics 2.10.0
PyPI · npm
l4rm4nd/PyADRecon-ADWS
An implementation of PyADRecon using ADWS instead of LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain. Evades EDR detections through ADWS.
MITAug 22, 2026 · metrics 2.10.0
Go
11lunaric11/securitychecker
Recon tool for pentesters & bug bounty hunters: check robots.txt, security.txt (RFC 9116) and /.well-known/ across many targets. CLI + web UI, single static Go binary.
MITJul 18, 2026 · metrics 2.10.0
PyPI
hackerest/pwneye
Your ONVIF and RTSP camera companion for discovering and hacking real-world security cameras 🎥
GPL-3.0Jul 18, 2026 · metrics 2.10.0
Go
mehulgupta1/subhound
Advanced subdomain enumeration for Linux & macOS — one Go binary that orchestrates subfinder, dnsx, httpx, asnmap & more into a fast discover→resolve→probe pipeline.
No licenseAug 20, 2026 · metrics 2.10.0
Go
syswraith/heimdall
Fast, concurrent username OSINT tool in Go — checks presence across sites via HTTP, JSON, headless browser, and OpenGraph parsing, with SQLite caching and YAML-driven site configs.
AGPL-3.0Jul 24, 2026 · metrics 2.10.0
Go
willygoid/fofa-grabber
A powerful Golang tool to fetch and export FOFA.info search results via API with real-time saving, concurrent requests, and multiple output formats (CSV, JSON, TXT)
MITJul 17, 2026 · metrics 2.10.0
crates.io
santhreal/ctlog
Canonical Certificate Transparency (crt.sh) client and name-extraction parser for Santh scanners - single source of truth for CT-log subdomain/origin discovery.
No licenseAug 13, 2026 · metrics 2.10.0
npm
devxprite/infoooze
A OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest.
MITAug 4, 2026 · metrics 2.10.0